Intelligent Blockchain-Based Secure Routing for Multidomain SDN-Enabled IoT Networks

Abstract

The development of fifth-generation (5G) mobile communication technology has become a major driver to the growth of Internet of Things (IoT) applications. As a promising networking paradigm, software-defined networking (SDN) makes IoT more flexible and agile by decoupling control plane from data plane. With a large number of heterogeneous devices accessing to the network, we need to divide the network into several domains and each domain is managed by an SDN controller. Controllers share topologies with each other to form global view of the entire network, which is used for crossing-domain path routing. However, crossing-domain routing requires global trust between multiple controllers. The reason is that if the malicious controller shares misleading topologies, the rest of controllers may calculate mistaken crossing-domain paths. As a result, packets are forwarded to the domain that is managed by the malicious controller and dropped deliberately, which is known as the black-hole attack. To this end, we present a blockchain-based architecture to ensure secure routing among multiple domains in SDN-enabled IoT networks. All SDN controllers are equipped with blockchains, and they upload abstract topologies to the blockchain via the smart contract. Thus, the genuine view of the entire network can be gained from the blockchain due to its consensus and immutability. In addition, we use the concept of reputation that consists of the local reputation and the global reputation to further protect routing reliability, and the global reputation is reserved in the blockchain. Compared with benchmark architectures, the emulation results show that our proposed method can effectively build trust between multiple controllers and ensure secure routing among multiple domains.

BPFC-SDNs: A Blockchain-Based and Policy-Oriented Forwarding Control for the SDN Interdomain

“…Figure 9 presents the packet sending rate of Input: mapAttrSet.fowSN, matchPolicySet Output: collaborativePolicy (1) fowPath � U; path � null; action � null; collaborativePolicy � ∅ (2) for (i � 0; i < getNum(matchPolicySet); i++) do (3) path ← getPath(matchPolicySet.policy[i]) (4) action ← getAction(matchPolicySet.policy[i]) (5) if (matchPolicySet.policy [i].policyType � � SOURCE) then (6) if (action � � forward) then (7) fowPath ← fowPath ∧ path (8) else if (action � � drop) then (9) fowPath ← fowPath ∧ path ( 10) else (11) report error (12) continue (13) end if (14) else if (matchPolicySet.policy [i].policyType � � TRANSFER) then (15) if (path! � null) then (16) report error ( 17) continue ( 18) else (19) if (action � � drop) then (20) domID ← getDomID(matchPolicySet.policy[i]) (21) fowPath ← fowPath ∧ domID ( 22) else (23) continue (24) end if (25) end if (26) else (27) report error ( 28) continue (29) end if (30) end for (31) egress switches S12, S13, and S14 in AS1, respectively, under baseline and BPFC-SDNs.…”

“…For example, [24] provides a systematic discussion of blockchain applications and challenges in IoT, [25] gives a detailed analysis of the performance evaluation of a blockchain-based security and privacy protection system, and [26] is a secure energy exchange scheme based on deep learning and blockchain. Specifcally, there are some security schemes that apply blockchain to SDN, such as blockchain-based secure routing for multidomain SDN [27], blockchain-based multicontroller deployment [28], and blockchain-based SDN fow rule verifcation [29]. Moreover, there are some schemes that apply blockchain to attribute-based access control [30,31].…”

Key Challenges and Emerging Technologies in Industrial IoT Architectures: A Review

“…Edge computing provides the data storage service at the edge, performs the tasks in the absence of cloud computing, and improve the network latency [ 72 ]. Software-Defined Networking (SDN): The Software-Defined Networking (SDN) dynamically manages the distributed network segments to provide optimization and agility in a network with the help of programmable controlling units [ 73 ]. According to IBM, SDN provides dynamic load-balancing in network traffic and vendor-independent support with the ease of central programmability and configuration features [ 74 ].…”

“…The Software-Defined Networking (SDN) dynamically manages the distributed network segments to provide optimization and agility in a network with the help of programmable controlling units [ 73 ]. According to IBM, SDN provides dynamic load-balancing in network traffic and vendor-independent support with the ease of central programmability and configuration features [ 74 ].…”

Cyber Threats Detection in Smart Environments Using SDN-Enabled DNN-LSTM Hybrid Framework

“…However, processing layers included the control plane and data plane, that actively participate in the decision making as well as facilitate other integrated technologies. The control plane introduces an entirely programmable architecture that provides a customizable administrative experience over the network [48]. It further can authorize the IoT devices into the data plane.…”